$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft File: 9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft (raw, json) Hash identifier: lPw/HB+pxoKHhBKvUhqrYgyoJiOhjDR8a5bTbt31CEg= Subject key identifier: 5F:57:97:5D:3C:F2:0D:3E:71:15:5B:39:17:2F:0F:74:F9:95:B5:3F Authority key identifier: 9D:FC:7A:51:49:D3:FC:C0:AC:D9:BB:ED:55:C4:CE:8E:A8:2A:03:8C Certificate issuer: /CN=9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C Certificate serial: 361534429AE17E699A71ABCAD5772B7B7B1ED21C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 10:21:06 +0000 Manifest this update: Wed 04 Nov 2026 10:16:06 +0000 Manifest next update: Thu 05 Nov 2026 13:06:06 +0000 Files and hashes: 1: 9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl (hash: 9KhHWpEDHUg98Sfa3TITOQJ+wSecVV7EAxgNxmlpu84=) 2: 3130332e32332e39382e302f32332d3233203d3e20313530323435.roa (hash: 7xqE0F9v+EXRL9dCkePN1NHTFDTfqFm2QwKgbcBy4ao=) 3: 3130332e32332e39392e302f32342d3234203d3e20313530323435.roa (hash: /Ar9BLD37pzpWiMramvnEnpVLlVnDEgU4xEdcB/AMOA=) 4: 323030313a6466313a653034303a3a2f34382d3438203d3e20313530323435.roa (hash: OPLg91e3QDUz0oxlHDtfye2YYgsL8tJKKqHtqB32VO0=) 5: 3130332e32332e39382e302f32342d3234203d3e20313530323435.roa (hash: w0+5fhmaBdxaqda6UhvTmcPuYEdSCtqjLZVClfvW/98=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:15:34:42:9a:e1:7e:69:9a:71:ab:ca:d5:77:2b:7b:7b:1e:d2:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C Validity Not Before: Nov 4 10:16:06 2026 GMT Not After : Nov 5 13:06:06 2026 GMT Subject: CN=5F57975D3CF20D3E71155B39172F0F74F995B53F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:59:05:9c:d8:0f:c9:8b:1b:24:a0:d2:2e:2f: 6d:64:0d:25:14:7b:17:4f:9f:8f:b7:b9:1a:0d:a1: 5b:21:d7:03:bf:a5:f8:94:74:a7:68:53:82:27:bc: 43:b3:be:57:87:e0:72:61:c8:64:f5:67:99:e1:7f: 96:4a:c3:d7:d7:2b:9d:b8:ed:43:c1:fe:9f:70:9b: 02:e2:99:9d:18:fd:25:63:2f:71:f0:26:f6:62:5b: d3:bc:ea:74:79:e6:3b:3d:17:e3:38:29:0d:ba:1a: 58:45:05:6c:51:a5:e0:dd:85:c9:16:76:bb:43:64: 49:4e:5b:b0:6a:44:61:61:ba:16:19:18:f2:81:37: 82:87:78:a7:f2:14:cc:31:73:f5:82:dc:80:0a:ac: 86:7d:d1:c9:fe:85:8b:0f:7a:a7:ff:9d:2f:2c:f9: 20:cc:39:8a:50:f8:a0:2d:15:2d:f1:41:65:8b:90: 0d:37:e7:fb:52:99:ec:60:8a:20:75:d6:80:fc:4d: ff:2b:02:60:64:31:b0:d7:76:27:73:5f:59:38:52: fc:da:e1:3b:36:dd:3b:57:06:1d:92:e9:49:3c:f5: 1c:3e:78:36:1a:4c:9b:2d:bd:ff:c0:8f:2e:94:ff: 3d:96:38:a7:5e:8d:1b:99:12:c6:9b:c5:e0:20:40: 01:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:57:97:5D:3C:F2:0D:3E:71:15:5B:39:17:2F:0F:74:F9:95:B5:3F X509v3 Authority Key Identifier: keyid:9D:FC:7A:51:49:D3:FC:C0:AC:D9:BB:ED:55:C4:CE:8E:A8:2A:03:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:24:b5:8f:96:a0:5e:25:66:e8:39:6b:51:0e:3e:56:15:aa: 85:23:9c:d3:56:7b:ee:c6:61:d4:5b:6c:16:c7:54:c6:2e:fe: ca:97:30:d7:54:60:a1:47:d9:f5:c3:6d:b0:5e:51:77:ba:c6: e3:6e:3c:e9:69:a5:2f:cb:04:a9:10:55:17:99:a0:0e:a7:90: 1c:85:dc:3e:25:72:7b:af:2c:cd:ed:01:42:f0:c8:18:0e:35: 60:0b:f7:92:1e:e2:89:e9:2b:c3:38:d7:a1:11:3f:33:ed:4c: f3:9b:21:73:76:a3:e5:05:d1:a8:da:5c:d8:0f:83:39:89:a6: 02:39:c3:17:d3:d2:3c:d0:d4:18:ea:c9:05:59:bf:2d:e0:8f: 27:2a:cf:eb:da:2b:55:26:fd:4a:3f:46:55:7f:05:98:07:a0: cc:57:9f:40:20:ad:35:e3:1c:b9:66:f1:2d:9f:22:f3:c8:83: fb:6e:c8:e4:d2:26:fc:94:bb:fc:07:2f:d7:47:59:ee:19:36: d4:7f:ae:05:8a:b6:5e:c7:5d:dc:53:ce:ed:e6:f8:8b:de:f6: d8:27:13:e2:5b:54:50:13:8c:0d:f1:84:1a:21:9e:c6:b0:e9: a3:c4:d8:60:05:a5:e0:d0:00:9a:62:94:cc:3b:f0:ae:69:7b: e8:f6:85:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNhU0QprhfmmacavK1Xcre3se0hwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURGQzdBNTE0OUQzRkNDMEFDRDlCQkVENTVDNENFOEVB ODJBMDM4QzAeFw0yNjExMDQxMDE2MDZaFw0yNjExMDUxMzA2MDZaMDMxMTAvBgNV BAMTKDVGNTc5NzVEM0NGMjBEM0U3MTE1NUIzOTE3MkYwRjc0Rjk5NUI1M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7WQWc2A/JixskoNIuL21kDSUU exdPn4+3uRoNoVsh1wO/pfiUdKdoU4InvEOzvleH4HJhyGT1Z5nhf5ZKw9fXK524 7UPB/p9wmwLimZ0Y/SVjL3HwJvZiW9O86nR55js9F+M4KQ26GlhFBWxRpeDdhckW drtDZElOW7BqRGFhuhYZGPKBN4KHeKfyFMwxc/WC3IAKrIZ90cn+hYsPeqf/nS8s +SDMOYpQ+KAtFS3xQWWLkA035/tSmexgiiB11oD8Tf8rAmBkMbDXdidzX1k4Uvza 4Ts23TtXBh2S6Uk89Rw+eDYaTJstvf/Ajy6U/z2WOKdejRuZEsabxeAgQAFHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX1eXXTzyDT5xFVs5Fy8PdPmVtT8wHwYDVR0j BBgwFoAUnfx6UUnT/MCs2bvtVcTOjqgqA4wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg0NmY0MjItYzMwMi00NDYyLWI1ODQtNzAwZTkzNDZjYTA5LzAvOURGQzdBNTE0 OUQzRkNDMEFDRDlCQkVENTVDNENFOEVBODJBMDM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REZDN0E1MTQ5RDNGQ0MwQUNEOUJCRUQ1NUM0Q0U4RUE4MkEw MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzg0NmY0MjItYzMwMi00NDYyLWI1 ODQtNzAwZTkzNDZjYTA5LzAvOURGQzdBNTE0OUQzRkNDMEFDRDlCQkVENTVDNENF OEVBODJBMDM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYktY+WoF4lZug5a1EOPlYVqoUjnNNWe+7G YdRbbBbHVMYu/sqXMNdUYKFH2fXDbbBeUXe6xuNuPOlppS/LBKkQVReZoA6nkByF 3D4lcnuvLM3tAULwyBgONWAL95Ie4onpK8M416ERPzPtTPObIXN2o+UF0ajaXNgP gzmJpgI5wxfT0jzQ1BjqyQVZvy3gjycqz+vaK1Um/Uo/RlV/BZgHoMxXn0AgrTXj HLlm8S2fIvPIg/tuyOTSJvyUu/wHL9dHWe4ZNtR/rgWKtl7HXdxTzu3m+Ive9tgn E+JbVFATjA3xhBohnsaw6aPE2GAFpeDQAJpilMw78K5pe+j2ha8= -----END CERTIFICATE-----Generated at Thu Nov 5 01:03:25 2026 by rpki-client